Which TCP and UDP ports can be used to start a NULL session attack in NT and 2000 operating systems?
Suggested Answer: C
Get Premium GSNA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
A null session is an anonymous connection to a freely accessible network share called IPC$ on Windows-based servers. It allows immediate
read and write access with Windows NT/2000 and read-access with Windows XP and 2003.
The command to be inserted at the DOS-prompt is as follows:
net use \IP address_or_host nameipc$ '' '/user:'
net use
Port numbers 139 TCP and 445 UDP can be used to start a NULL session attack.
12 comments · newest first
WI
Willow
1 year ago
I thought NULL sessions were outdated, do they still work?
LA
Lashaunda
1 year ago
Definitely 139 and 445, classic ports for that attack.
JE
Jerry
1 year ago
Wait, are you guys sure? I thought it was different ports.
KA
Katlyn
1 year ago
Yeah, I agree with that!
SH
Sherrell
1 year ago
Pretty sure it's 139 and 445.
JU
Juliana
1 year ago
I thought NULL sessions used different ports, but now I'm second-guessing myself. Is it really C, or could it be something else?
GA
Gayla
1 year ago
I practiced a question like this, and I feel like 139 and 445 were mentioned as common ports for vulnerabilities.
DE
Dewitt
1 year ago
I'm not entirely sure, but I remember something about those ports being used for SMB. Could it be option C?
CH
Chauncey
1 year ago
I think the ports for a NULL session attack are related to file sharing, so maybe it's 139 and 445?
LE
Lewis
1 year ago
Hmm, I'm not entirely sure about this one. I know there are a few different command line tools related to table management, but I'm not positive which ones are used for determining data order. I'll have to think it through carefully.
AD
Adolph
1 year ago
Hmm, not sure about this one. I'll need to think carefully about the legal and ethical considerations around commitments to customers. Gotta make sure I don't miss anything important.
AM
Amalia
1 year ago
Hmm, I'm not too sure about the Value Index. I'll have to think this through carefully.